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SECURE ELECTRONIC COMMERCE SYSTEM 



COPYRIGHT NOTICE 

Copyright, 1998, 1999, DMOD, Inc. A portion of the disclosure of this patent 
5 document contains material which is subject to copyright protection. The copyright owner 

has no objection to reproduction by anyone of the patent document or the patent 

disclosure, as it appears in the U.S. Patent and Trademark Office patent file or records, 

but otherwise reserves all copyright rights whatsoever. 

CROSS-REFERENCE TO RELATED APPLICATIONS 
10 This application is related to and dauns the benefit of U.S. Provisional Application 

Serial No. 60/ 128,846. filed AprU 12. 1999. which is hereby incorporated by reference 

in its entirety. 

STATEMENT REGARDING FEDERALLY SPONSORED RESEARCH 
Not Applicable 
15 REFERENCE TO MICROHCHE APPENDDC 
Not Applicable 
BACKGROUND OF THE INVENTION 

This invention relates to secure methods and systems for conducting electronic 
commerce and the distribution of audio, video, and text works and. more particularly, to a 
20 method and system which utilizes encryption in a client-server environment to provide 

secure electronic commerce transactions and the encrypted distribution of audio, video and 
text works for value. 
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Traditionally, emertainment and anistic works such as music and movies, are 
distributed by incorporating a copy of the work in a medium from which the work, such 
as a song or a movie, can be heard or viewed using a device. For example, music is 
distributed on records, tapes and compact discs and movies are distributed on tapes and 
5 digital video disks. The technologies associated with these media have developed over 
time in order to permit very high quality reproductions of the original work. 

The technology also exists to convert these works into digital data that can be 
stored in memory in a computer or distributed via a network. This technology permits the 
works to be stored on digital media such as compact discs ("CDs") and digital video disks 
10 (-DVDs-). One of the disadvantages of this technology is that in order to provide a high 
level of sound and video quality, the works require very large quantities of memory. For 
example, a four minute song recorded on a CD occupies approximately 40 Megabytes of 
digital data in its native format, thus limiting the number songs that can be contained on a 
single CD and making distribution of music using the present network infrastructure 
15 impractical. 

Alternative technologies have been developed which enable that same four minute 
song to be stored in less than 4 Megabytes of digital data. One such technology. MPEG 
1. audio layer 3. which is more commonly known as MP3. defines how digital audio can 
be stored and transmitted using computers and networks. Other standards and 

20 technologies currently ex.st and still others are being developed. 

These digital media technologies allow a consumer to store music in non-volatile 
memory such as a harddisk drive in a personal computer and use a software program, 
applet or plugin. commonly referred to as a media player, to play the music using the 
multimedia resources of a personal computer. Well known media players for MP3 
25 technologies include WinAmp available from NullSoft. Inc. of Sedona. Arizona and 
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Sonique available from Mediascience, Inc. of San Francisco, California. These products 
allow a user to play MP3 encoded audio on a personal computer. Other products, such as 
the Rio available from Diamond Multimedia, Inc. and the MPMan available from Saehan 
Information Systems, Inc. of Seoul, Korea, enable a consumer to store and play MP3 
5 encoded audio in a portable device. These electronic devices typically store the MP3 
encoded audio in a flash memory that allows non-volatile storage of the audio and aUows 
the MP3 encoded audio to be erased or over written. 

Digital medial technologies such as MP3 facilitate the abUity to distribute audio 
and video via the current network infrastrucmre such as the internet. These technologies 
10 enable independent authors and artists to semp websites on the World Wide Web 

("WWW") to distribute dieir works and overcome conventional barriers to distribution, 
which typically require the author or artist to enter into an agreement with a third party 
organization, such as a publishing or recording company, to promote and distribute the 
audior or artist's work. These technologies also provide a means for the unauthorized 

15 distribution of the work. 

In addition, there is no integrated system or infrastructure in place to enable music 
distributors, for example, to collect royalties on a per track (or per song) basis. Presently, 
music is distributed in album format which includes multiple tracks. There is no effective 
way to track which consumers were licensed which works. There is no effective way to 
20 verifN' the identity of consumer who is attempting download a copy of a work over a 
network such as the internet. 

Accordingly, it is an object of this invention to provide an improved method and 

system for distributing audio, video and te.xt works. 
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It is another object of the present invention to provide an improved method and 
system for distributing audio, video and text works which prevents the unauthorized 
distribution or redistribution of the works. 

It is yet another object of the present invention to provide an improved method and 
5 system for managing the electronic commerce of the distribution of works and other goods 
or services over a network such as the internet. 

SUMMARY OF THE INVENTION 

The present invention is directed to a method and system for distributing goods and 
10 audio, video and text works over a network, such as the Internet. The method and system 
according to the invention allow for the transaction to occur in a secure mam«r which 
permits the distributor to verify the identit>- of the consumer (or customer) and impedes 
the unauthorized distribution of the works by the consumer (or customer) and third 
parties. 

^ ^ o»n« of *= work o, U» disTibu«,r <o su,r. ^ ai«ribuu= d>. work over a 
««,rk «^ a cliem sysfo whicl. is ad.p.«l » commuBicae wid. d>e serv« systtm to 
,«elve copte of the work ov,=r Ure rKWork. The save, system can 
n»^„ for storin, copies of the works to be distributed or alu^nratively d« server system 
» can be adapted ,o access a storage faciiit). wbicb stores copies of Ute works, such as over a 
network or othe, data comtecon. The setve, system can also .nclude an electronic 
conunerce sys«=m which is adapted for receiving value (payment) from the consumer or 
customer and distributing dtat value to various parties for example the owner of dte work 
the auth^ized distributor of the wotk. The electronic commerce system can receive 
„ value from d» consume on either a credit basis (such as using a credit card account, or a 
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debit basis (such as allowing consumers lo purchase credits against which they may 
receive works). The server system can also include an encryption system which allows 
the distributor to uniquely encrypt the works distributed to a consumer. Thus, the works 
disuibuted to one consumer could be differently encrypted from the works distributed to 
5 another consumer. The server system can include an encryption key database which 
maintains a unique key for each consumer. The unique key can also serve to allow the 
distributor or retailer to verify the ideniiiv' of the client system (and the consumer) and to 
uniquely encrypt the copy of the work or any other data that is transmitted to the client 

system (and the consumer). 
10 The client system according to the presem invention can be adapted to interface 

with the above described server system to transfer value from the consumer to the 
distributor (and the owner) and transfer a copy of the work to the consumer. The client 
system can include an encryption system which is uniquely adapted to decrypt the work 
distributed to the consumer in possession of the client system. In one embodiment, the 
15 client system can incorporate the unique key from the server system. The client system 
can include several unique keys from several different server systems. 

The client system according to the present invention can be adapted to interface 
with the electronic commerce system of the above described server to facUitate the 
transfer of value and enable to the distributor or retailer to verify the identity of the client 
20 system and ultimately the consumer. In one embodiment, the server system matma.i»s a 
unique encryption key which is embedded (or hard coded) into the client system. The 
server system can verify the identity of the client system by requesting the client system to 
transmit a predefined message . 'identification code, or electronic certificate which is 
encrypted using the key embedded in the client system. The server system can use the 
25 unique key stored in the key database to verify the encrypted message came from the 
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Client that is registered in the database by decrypting the predefined message and 
comparing it to an expected value. The same message can include other information such 
as a credit card information (number and expiration date) or an authorization to debit an 
account (including an account number). Alternatively, other known identification 
5 verification methods can be used to verify the client system. 

In another embodiment, a public key encryption system can be used to encrypt the 
work and any messages that are transferred between the server system and to the client 
system. In this embodiment, the system can further include a public key server which is 
adapted to transmit the server system's public key to the client and the client system's 
,0 public key to the server system. Digital signamres can be used by both the client system 
and the server system to verify the identitj- of the other. Public key encryption systems 
are available from RSA Data Security. Inc. of San Mateo. California. 

la one embodiment, the cUeni system can also include a media player adapted to 
enable the consumer to use to the work as permitted by the owner, such as listen to an 
.5 audio work, view a video work or read text in a manner similar to the way one would read 
a book. Alternatively, a separate media player could be used. As u^ herein, die client 
system can reside on a personal computer or the client system can be a combination of 
hardware and software that is configured or adapted to perform the fimctions described, 
such as a portable device similar to a poruble tape or CD player. 
20 m an aliernaiive embodiment of the present .nvem.on. the diem and server 

systems can be par; of a umversal electronic commerce system. In this embodiment, the 
client system can be a universal electronic commerce client to faciliute electronic 
transactions over a network such as the Internet. In this embodiment, the client be 
embedded into a web browser or be a -plug-in" software module that provides additional 
25 functionality to a browser or other program. The universal electronic commerce system 
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can include several server systems which can reside on a single system or be distributed 
over a network, such as a virtual private network or the internet. This embodiment can 
include a retailer or distributor server which is adapted to interface with the client to 
facilitate an electronic transaction with a consumer. The system can also include a key 
server which is adapted to manage the key database to transfer consumer keys to the 
retailer or distributor and transfer retailer or distributor keys to the consumer. In one 
embodiment, the key server is managed by an independem company, trusted industry 
organization, or the govenunem. The system can further include a credit or debit account 
server which manages the various accounts, including the consumer account, the retailer 
account, the distribution account and the owner account. In one embodiment, the credit or 
debit account server can be managed by a credit card company, a bank or simUar 
organization. Alternatively, the key distribution and credit/debit functions can be 
managed on the same server or jointly by one or more of the organizations identified 
above. 

The method according to the present invention can include the following steps: 
The consumer or customer can use the diem system to establish a comiection with the 
server system. If the cliem system does not have a unique key and thus is not registered 
with the server system (and the owner, distributor or retailer), the diem system and server 
system interact to enable the consumer to register with the distributor or retailer such as 
providing the customer name, address, telephone and even credit card information. The 
server system generates a unique key for the diem system and transmits the unique key to 
the client system to use in comiection with transactions with the server system. 
Preferably, the unique key is embedded into the software and/or hardware which makes 
up part of the dient system, and is transmitted or delivered to the consumer. The client 
5 system which contains the miique key is now used^in all subsequent transactions with the 
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ai«rib„„r or rmu« server. The co„s«er Les *e Oi™ sys«=m to purely a wort 
such as a song or group of songs, snd. as an album, from .he disrriburor or a produc. or 
service from a reu,Uer. Because die client sys.«n has a uni<^ key, the client system can 
be used to enter into an electronic transacdon «iU. d.e distributor or retailer b, simply 
, selecdng die work or dte good or service desi,«i from a list, such as a menu or a web 
page, and matateting an intern to enter into die trans«»on. such as by clicking on a 
button, typing a letter or word or transmitting informadon (such as credit/debU card or 
account information) to U.e server syst«n. Once the co^umer manife^s dte int«>t to 
emer into the transacdon. die act can b. record^! by d« server system and dte server 

,0 system can utilize die electronic commerce system u, afl«. die transfer of value to U>e 
appropriate parties or die server syst«D. If dte value is successfully .ransli=rred. the 
server syst«. can encrypt d-e wort using dte consumer's unique key and tra«mit d>e 
^ «, dte diem system or in dte case of bard goods or services, imentc. wid. odier 

systems to cause dte goods or services to be dettver^l to d« consumer. In a. altemativ. 
,5 embodimen.,d>em«l.od«>dsystemofd,ei.vendo.canuse.p«blickeyencrypdon 
system in which dte server system uses dte consu,«r s public key to encrypt dte work to 
he transmitted to d« diem system and dte diem system uses U-e cUem s private key to 
decrypt and use and enjoy the work. 



20 BRIEF DESCRIPTION OF THE DRAWINGS 

The foregomg and other objects of thxs .nvention, the various feamres thereof, as 
well as the invention itself, may be more ^Uy understood from the following description, 
when read together with the accompanying drawings in which: 

FIGURE 1 is a diagrammatic view of a system for disuibuting works over a 
25 network according to the present invention; 
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FIGURE 2 is a diagrammatic view of an alternate system for distributing works 
over a network according to the present invention; 

FIGURE 3 is a diagrammatic view of a method of operating a media server in 
accordance with the present invention; 

RGURE 4 is a diagrammatic view of a method of distributing low quality copies 
of a work according to the present invention: 

HGURE 5 is a diagrammatic view of a method of distributing high quality copies 
of a work according to the present invention; 

HGURE 6 is a diagrammatic view of a method of using a media player to decrypt 
and play an encrypted work according to the present invention; 

HGURE 7 is a diagrammatic view of a method of searching a database for a work 

according to the present invention; 

FIGURE 8 is a diagrammatic view of a method of demonstrating a low quality 
copy of a work according to the present invention; 

HGURE 9 is a diagrammatic view of a method of downloading a high quality copy 
of a work according to the present invention: 

HGURE 10 is a diagrammatic view of method of purchasing a copy of a work 

according to the present invention; 

FIGURE 1 1 is a diagrammatic view of a method of uploading music to a 
disiribuiion server according lo the preseni inveniion; 

FIGURE 12 is a diagrammatic view of a method of transferring value in exchange 
for the receipt of a work according to the present invention; 

HGURE 13 is a diagrammatic view of a method of registering a client system with 
a server system according to the present invention; 
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HGURE 14 is a diagrammatic view of method of browsing a server system 
daubase to select a work according to the present invention; and 

HGURE 15 is a diagrammatic view of a universal electronic commerce for 
distributing works and conducting electronic transacuons for the sale of goods and 
5 services over a network according to the present invention. 

DETAILED DESCRIFTION OF THE PREFERRED EMBODIMENTS 

The present invention is directed to a method and system for conducting secure 
electronic commerce transactions. In order to illustrate the application of die invention 
and to facUitate a better understanding of the mvention. the invention is described below 
,0 as embodied in a method and system for distributing music over a network such as the 
internet. WhUe the invention is suited for distributing copyrightable works (such as, for 
example, music, audio, video and text) in electronic form, a person having ordinary skill 
in the art will appreciate, the invention can be embodied in a mediod and system for 
conducting electronic commerce such as retail sales over a network. 
,5 The method and system according to Uie invention allow customers to browse a list 

of music, listen to a preview, and purchase a copy of encoded music fUes (such as MP3 
encoded files) over the Internet. In accordance with the invention, three components can 
be used to accomplish this task: 1) a Media Server; 2) a Remote or client system 
(customer); and 3) a website and associated backend system. In one embodiment, the 
,0 media server .s primarily responsible for distributing music to users across the Internet, 
in th.s embodimem. .he system server can be a physical machme connected to the Internet 
and the media server can include a computer program software tiiat runs on one or more 
system servers. The remote or client system can include any device (such as, a computer, 
personal digital assistant or portable MP3 player) that can be used for searching, playing. 
,5 and purchasing music. The web site has a multi-purpose role. The web site is used for 
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database maintenance and searching, credit card processing, and song playbaclc. Each of 
these components utilize a database of information centrally stored on the system servers. 

Figure 1 shows a system 100 for distributing music over a network such as the 
internet 105 in accordance with the present invention. The system 100 includes a miedia 
5 web server 110 such a Unix or LINUX based web server, for example Slackware Linux, 
installed on an Intel Corp. (Santa Clara, CA) or Digital Equipment Corporation/Compaq 
(Houston, TX) or Sun Microsystems SPARC (Palo Alto. CA) based computer 112. The 
media web server 1 10 is connected to the internet 105, for example by a Tl connection. 
The media web server 1 10 can include a database 1 14. such as a SQL compatible database 
10 created by MySQL available from T.C.X DataKonsult AB of Stockhohn. Sweden. The 
media web server 110 can include a media server engine 112 which includes software 
which enables the media web server to distribute encoded music. The media web server 
110 can include an electronic commerce engine 116, such a CyberCash CashRegister 
Payment Services available from CyberCash, Inc. of Reston, Vu-ginia. The media web 
15 server 110 can further include an encoding/decoding engine such as an MPEG 
encoding/decoding engine for converting audio such as music to various levels of quality 
and an encryption engine for generating unique keys and encrypting music streams to be 
downloaded by the cliem. One such MPEG encoding/decodmg engine is Xaudio avaUable 
from MPEGTV of San Francisco, California. One such encryption/decryption engine is 
20 BlowFish available trom Counterpane Systems of Mimieapolis, Minnesota. Another 
encryption/decryption engine can be a public key - private key system such as Pretty Good 
Privacy available from Network Associates, Inc. of Santa Clara, California. 

The system 100 can also include a customer computer system 120 to enable the 
customer/consumer to transfer payment to the distributor or owner and download music, 
25 videos or text. The customer computer system 120 can be any personal computer 122, 
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such as an Apple Macintosh or an IBM compatible personal computer. In one 
embodiment, the customer computer system 120 is an IBM compatible personal computer 
nnming the Windows operating system available from Microsoft Corp., Redmond, 
Washington. The customer computer system 120 can also include Netscape 
5 communicator or Microsoft Internet Explorer as the browser software used to access ti.e 
web site on the Media Web Server 110. The browser can be equipped with a media 
player -plug-in" software module or media player computer program or applet 124 which 
can decrypt and decode the encrypted. MP3 encoded work (music, video or text stream) to 
allow the user to utilize the work. Alternatively, the media player 124 can be a stand 
10 alone appUcation that can be enabled to access the Media Web Server 1 10 via the internet 
to browse a list of songs (videos or texts) available for download and complete the 
electronic transaction. 

an aufl.or. artist. n»ician or o««r of. «ork » .plo«i . «orlc » U.= m-ia «.b server 
„ „o.Tbis*mcdoncanbe«corpo.«=dm*e™du.pI;«rerl24on,l»san«^^ 

^ by *= eusromer as discussed above or c«> be a separate con,K,nem to, is imralled 
0. sep»» clicm sys«m 230. Like *e cus,or«r e.i=« s,s«n 120. me «u,bor/artis. 
sys^o 130 can be a., con^^r. such as an Appte Madn^sh or an IBM con,pa<ible 
personal computer 132. 

,„ Figure 2 shows an ai,erna,ive system 200 for te.ribu,i„g music (audio, video or 

„„) over d« imeme. in accordance wid, U>e presen. ■nv«.uon. In dns embodime... .he 
toUons of ih. medU web server described above can be dis.ribu«d over several server 
systems 210 and 211. For example, dte an incoming media server 211 can be provided 
for uplo»«og works such as music, videos and text to a common daubase 214 and an 

„ outgoing .r^dia web server 210 can be provided fbr distributing low quality music (for 
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browsing) and high quality music (for purchases) to customers. The outgoing media 
server 210 can include a media server engine 212 to distribute music and an electronic 
commerce engine 216 to facilitate electronic transactions. The outgoing media server 210 
can also include the encryption engine 218 and a key database which allows the high 
5 quality music to be encrypted prior to being transferred to the customer system 220 to 
prevent unauthorized distribution of the music. 

In accordance with one embodiment of the invention, the media server is a central 
element of the system. The media server is primarily responsible for distributing music to 
users of the system. The media server can run on one or more system servers connected 
10 to the Internet. The media server is continuously running; it waits for requests from 
remote clients at customer systems and then processes those requests. In accordance with 
the inventions, there are two types of download requests the media server acts upon: (1) a 
request for a low quality stream, and (2) a request for a high quality stream. Both 
processes are handled in a similar manner, but an additional step is required for a high 
IS quality stream. 

As shown in HGURE 3, when the media server program loads, it enters the ready 
state at step 310 and begins listening for requests on a predefined port, such as, for 
example port 3005. Whenever a remote client requests a stream, the request is received at 
port 3005 on the system server for processing by the media server at step 312. Upon 

20 receipt of a request, the media server determines whether the received request is a request 
to browse or preview a song (low quality) or a request to purchase a song (high quality) at 
step 314. Depending upon whether the request is a request for a high quality stream or a 
low quality stream, the media server will initiate a process to transmit a high quality 
stream at step 316 or a low quality stream at step 318. Typically, the media server will 

25 begin a new process to handle the client (the remote) individually. This new process will 
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connect back to the remote on a different predefined port, such as. for example, port 3006 
to handle the data stream. THis design allows for the media server to handle simultaneous 
streams without any interference between them. The media server seems to be limited 

only by the available hardware. 

5 AS shown in HGURE 4. when a remote diem requests a low quality media stream 

(a browse), the media server responds by creating a new process to serve the request at 
step 412. This process identifies the stream requested and opens the appropriate low 
quality file on the server at step 414. The media server then begins to send the file in 
packets across the Internet to the remote cliem at step 416. This process continues 

,0 sending packets untU either the end of .he file is reached, or the comxection to the remote 
client is lost at step 418. When the process terminates at step 420. it remms the media 

server to its previous state. 

M shov™ m HGURE 3. when a nrmoK rc>«sB . bigh qualify s«e=m (. 
p„^,*.s«verreaas«spo»bi..suml.r,«»r. m «rv„ agai. c«« a «w 
,s p^s»ba«acaKre^.a.s..p512. B«.»S..MsfU.wiUt.wH«n.odi**» 

™,Upl. playbacks, ^ fUc is op««d a, s«p 514 a-d .he Be is .acryp«. so h can »« 
,isrtu«d after i. has b«. purchased. This is accomplished b, usi.« d« a-i^ 
rcgisnado. or key numh« assig^d >. rc»»« cli««. This iBfon,«on is to 

encyp, d„ m. as i. is bciag sen, » d-c cosine, i. seep 516. Again. d.e process 
„ con.,„ues umi. .he entire file has been sen. .o ,he remo,e cUen. a. s.ep 5,8. After .he 
process is finished. .. .e.ums U,e server .0 us prevoos s«.e a. s.ep 520. 

The remoK dien. can be a program .ha, resides on ti>e user's co,np«er. The 
^0. Cien, can mclude ,he ft.nc,ionali^ .0 play MPEG or an, oU,er encoded music file, 
search *e music daubase a, *e webshe. reques. music soeams ftom U.. medU serv«. 
,s andallo^spurchasingofmusic. Excep, for *e pUyback of local (on U,e hard drive) 
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MPEG music files, all other processes require an Internet connection to communicate with 
the servers. There are two types of the remote client: (1) a basic player client which is 
limited by not allowing the purchase of songs, and (2) a registered player client which has 
all of the functionality required to use purchase and upload music to the system servers. 
5 After a user has downloaded the basic player client, they can register the client. This 
registration process is performed through the web site, and provides the information 
needed to process transactions (transfer value), and assigns a unique key to be used in the 
encryption and decryption process for purchased music. When a user has completed the 
registration process, a custom version of the registered player client is downloaded to the 

10 user's computer. 

Song playback is handled by song lists at the remote client. A customer can create 
custom song lists from low quaUty streams, purchased songs, and any non-encrypted 
audio file on the customer's computer. As shown in HGURE 6. when a song is played, 
the remote client checks to see if the fUe is a local fde at step 612 and if so, die remote 

15 opens the fUe at step 622, and passes it to the MPEG decoder. The decoder takes the fUe 
and decompresses it for playback, and then plays it. If the song is a purchased audio file 
at step 618, the file is first decrypted at step 620 and then passed to the decoder at step 
622. If the file is not a local file at step 612, the remote client initializes a process to 
download a low quality stream at step 614. In one embodiment, the MPEG 

20 encoder/decoder is ihe X audio MPEG audio engine available from MPEGTV, LLC of 

San Francisco. California. 

The song lists used by the remote client can be created from local files, or streams 
from the system server. As shown in FIGURE 7. when a customer wishes to add a 
stream to the song list, the information needed to play the song is retrieved through a 
25 search of "the database. When a customer enters a query, by band name for example, the 
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remote client must pass the request to the system server. The remote client connects to 
the system server at step 712 and passes the request to the system database at 714. The 
database then performs the search and passes the information back to the remote client 
where the information can be added to the song list at step 716 before closing the 

5 connection at step 718. 

M sho»n in FIGURE 8, «l>m a as« » 1"^ 

fton. U„ media s«v« a. s-q, 812, 0« media server can estabUsb a separa» co^eoion «. 
fl« remo« clien. for *e purpose of transmirdng *e music <la.a to <l.e remoK client. As 
the remote client receives the informadon from the media server, i, is passed to dK MPEG 

,0 decoder a. step 814 for playback. A. tUs point d,e s«am is treated as if K «ere a local 

fll,. AS the informaUo. is retrieved from die medto server, it U stored in memo,,. The 
i^nuation is never written to disk hec»« i. is inte»i«l that d.. so«, wia be »^ 

„„ d« user's machine. In one embodimeB. dte lo« qnali., stream is a 
2<Kbls. 22KHZ MP3 encoded stream or lower qualily. 

A shown in FIGURE 9. when a customer retpests a bigh quaUt, stream (a 
purchase) at step 9.8 from d« media server, dre process is similar to a browse. A high 
quality stream is undated in step 912 and d» song IS dow^o«.«.. A song is 

^ puyed as it is downlo»fcd. Because d,. fUe is purchased, d>e «le is stored In its 
e^^pted form on dte m«no,y of dte custom^'s system In step 914. This allows the 
customer to listen ,o the f.le wubou, ,he need ,o be connected ,o the Interne,. In one 
embodiment, the btgh quality stteam ,s a 128kb/., 44.1KH. MP3 encoded sueam o, .ette, 
quality. 

AS shown m HGURE 10, customers can purchase songs wid. the remote diem. 
Customers must f,rs, purchase points from Ute web site before purchasing songs. When a 
„ customer buys a high quality sound file, dte remote handles the transaction. A conneaion 
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is established to the database on the system server in step 1012. The remote client checks 
the database for points to purchase the song at step 1014. If a customer has points 
available at step 1016. the number of points is automatically updated in the database at 
step 1020. the database connection is closed at step 1022, and the remote client initiates a 
5 high quality stream from the media server at step 1024. If the customer doesn't have 
enough points at step 1016. the customer is informed of the deficiency and the process is 
terminated at step 1018. 

As shown in FIGURE 11. musicians can upload their music to the database using 
the remote client. The musician needs only a. high quality audio file such as a 128 kb/s, 
10 44.1 kHz, Stereo MP3 file and a musician account in the database. A musician account 
can be created on the web site by a registered customer. When the process begins, the 
musician can be prompted to select the items to be uploaded at step 1110 and to input 
information about the song at step 1112. This information can be stored and later used in 
searches of the database. The remote client then connects to the database at step 1114. 
15 updates the information in the daubase at step 1116, and uploads the file to the system 
server at step 1118. After the song upload is complete, the database connection is closed 
at step 1 120. Once the file is saved on the server, a separate process can be used to create 
the low quality file at step 1122. For example, the high quality file is decoded into .wav 
format, then encoded into a low quality (24 kb/s, 22 kHz, Stereo) MP3 and saved. The 
20 song will be available once it has been checked for errors. 

The web site provides a range of functionality to both customers and musicians. 
Some of the functions the web site can perform are: (1) To collect a variety of user 
information. (2) Credit card processing, (3) Client registration, and (4) Generating listings 
from search of the database. Information can be collected throughout the web site using 
25 HTML forms and stored in the database. Credit card processing can be handled through a 
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3- party service, such as cyber cash payment services avaUable from Cyber Cash. Inc., 
Reston, Virginia. Client registrauon provides the customer with a fuUy fiinctional remote 
client that can be used to purchase music. The band information feamres. musician listings 
and musician information, rely on querying the database for information, and presenting it 
5 to the user. 

0« ponton of *. e-commerc sysKm is credit card processing. As sl»wn ta 

^ a. step 1210 ami «m U>= transaction infonnatio. snch as cr»ii< card infbmmion 
,„ complete tlte transaction at step 1212. Points can be used to purctase songs. The 
,„ nnntber of points a user currently nas is tra*«. In the database. Unlilt. .be rest of the «eh 
the cr«ii. card processing pages us. sec« soclcets (SSL) to handle dte 
c^^nications. Ue web Site sends d» appropriate infornmion to a 3- parV scnto 

auth^uicatton a. step 1214. When a response is received Irom the authendcadon service, 
i, the transactfon is approved at step 1216. the program upda«s the database at step 1220 
,5 and if the transacdo. is not approved. a»l in«mns the user of the result of the transaction. 

Ald,ough a customer can browse music and pla, MP3 files with the basic remote 
client, a customer must have a registered remote client to purchase high tptality mes. As 
shown in FIGURE 13. when a customer wishes to register at step 1310. dte, provide 
general infonnation about themsdv«i for use b, the distribution source at step 1312. 
After this ,„for,na.,o„ is stored in the da^base a, step 1314, a um,ue ^ is assigned to 
^ customer .or use ,o the =„crypt,on and oectyptton process of the high quality sound 
mes a. step 1316. A custom registered remote client program is dten aeated with the 
appropriate registration infonnation and sent to the custon«r a. step 1318. A customer 
can now purchase high quality sound files and listen to dKm. 
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The artist and band listings provide the customer with the ability to locate artists 
and bands based upon a variety of criteria. The artist/band listing is maintained by the 
website backend. When a search is passed to the backend. it first establishes a coraiection 
to the database. When the connection is established, the backend sends the request to the 
database and waits for a response. As the information is returned from the database, it is 
formatted according to template files. These templates provide instructions for how the 
information is formatted in standard HTML. The generation of artistT)and listings can be 
initiated by: (1) custom searches of the database from the web site, or (2) changes to the 
database. 

In addition, as shown in FIGURE 14, a customer can also initialize a browse 
function from the web site at step 1410. When a customer selects a song from the web 
page, the web backend sends a fUe associated with the remote to the user's web browser at 
step 1412. When the web browser receives this fUe. it automatically launches the remote 
client at step 1414. This file contains instructions that initiate a low quality stream of the 

song selected from the web site. 

Figure 15 shows a system 1500 for conducting electronic commerce over the 
internet in accordance witii the present invention. In this embodiment, the system 
includes a plurality of servers 1510. 1520. 1530 and a universal electronic commerce 
client 1550. The client 1550 can include a web browser 1554 which is configured to 
include a unique encryption key or other unique identifier 1556 which is used for all 
electronic transactions with a retail web server 1530 which allows for the secure purchase 
of goods, services or works (audio, video or text). The retail web server 1530 can include 
any computer server coupled to a retailer/distributor database 1532 that is used in 
electronic transactions for the sale of goods, services or the distribution of audio, video or 
5 text works. The system 1500 can also include a key encryption system in which the 
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client's unique private key is stored in an in^endent, trusted public key server 1520 and 
associated key database 1522 which can only accessed by authorized retailer or distributor 
servers. The system 1500 can also include a credit/debit web server 1510 which permits 
Ae customer to establish an account and provides for the transfer of value (payment) in 
5 exchange for works downloaded. The credit/debit web server 1510 can include a 

credit/debit database 1512 in which customer, retailer, distributor and owner accounts can 

be stored. 

AS one of ordinary skill will appreciate, the system of die present invention can be 
used to distribute works (audio, video or text) in a business to business context as well as 
10 a business to consumer or customer context. For example, music can be distributed for 
use in offices, waiting rooms and elevators using the above identified system. In this 
embodhnent the music can be downloaded as needed based on a predefined progr^ 

downloaded and stored for later playback according to a predefined program. 
Alternatively, the browse mode can be used to receive predefined or random streams of 
15 music for use in offices, waiting rooms or elevators, etc. 

The invention may be embodied in other specific forms widiout departing from the 
spirit or essential characteristics thereof. The present embodiments are therefore to be 
considered in respects as illustrative and not restrictive, the scope of the invention being 
indicated by the appended claims radier than by the foregoing description, and aU changes 
20 Which come within the meaning and range of the equivalency of the claims are therefore 
intended to be embraced therein. 
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What is claimed is 

1 An apparatus for distributing a units of information representative of copyrightable 
works over a netv/ork, said apparams comprising: 

an information database adapted for storing said units of information representative 
5 of copyrightable works; 

a media server, connected to said information database, including a computer 
system, associated memory, and media server software, said media server software being 
adapted to retrieve said units of information from said information database and to 
transmit said units of information to a plurality of client systems over said network; 
10 an encryption engine connected to said media server and adapted for processing 

each of said units of information to create encrypted units of information according to a 
unique key for each client system. 

2. An system for distributing a units of information representative of copyrightable 

works over a network comprising: 
15 an information database adapted for storing said units of information representative 

of copyrightable works; 

a media server, connected to said information database, including a computer 
system and associated memory, said media server including media server software, said 
media server software being adapted to retrieve said units of information from said 
2C information database and to transmit said units of information to a plurality of client 
systems over said network; 

an encryption engine connected to said media server adapted for processing each of 
said units of information to create encrypted units of information according to a unique 

key for each client system; 
25 a client system including a computer system, associated memory, and client 
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software, said client software being adapted for communicating with said media server to 
receive said encrypted units of information from said media server; 

said client system including a reader adapted for decrypting and presenting said 

information to an end user; 
5 wherein said reader includes a unique key adapted decrypting said encrypted units 

of information and said media server is adapted for encrypting said units of information 

according to at least one key diat is unique to the reader of each client system. 

3. A method of distributing units of information representative of copyrightable 

works over a network comprising the steps of: 
10 storing each of said units of information in a database; 

upon request from a client system for a particular unit of information, retrieving 

said unit of information and encrypting said unit of information using a key unique to said 

client system; and 

transferring said encrypted unit of infi)rmation to said cUent system. 
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